“Personal data processing” by Business Intelligence services

Purposes of processing personal data in this ToE (Business Intelligence): 1. Analyse customers to support business decisions. Strategic analyses have as result reports that are always at an aggregate level. 2. Process customer lists for campaigns. In this case the office passes to the IT interlocutors a list of internal identifiers and tax codes of customers, sometimes with the relevant agency, inclined to purchase a specific product or target for email contact campaign. The list is extracted based on decision trees. The consents expressed for the treatments connected to the commercial promos are taken into consideration throughout the whole processing of data. The process ends here. In another process, not under certification, IT charge those simple data (e.g., name and surname, email, telephone number,) in Commercial Campaigns - Adobe Campaign

KTH-E02-F03-1e GDPR PPS - Evaluation methodology (On-site assessment, Remote assessment, Interviews and questionnaires, Documentation overview, Data flow mapping, Data minimisationchecks, Access control, Securitisation procedures, Risk Analysis, Privacy incident handling ... etc.)

TAM CERT Hungary Inspection and Certification Ltd. certifies that the Target of Evaluation is complying with the applicable requirements of the Certification Scheme (EP-CS.1 Europrivacy™/® GDPR Certification Scheme - General Specification and Requirements (v77), KTH-E02/F03 GDPR – Products, Processes & Services (PPS)Certification (v4), NAIH - Requirement under Article 43 (1) letter b) of the General Data Protection Regulation to accredit a certification body under Article 43 of the GDPR (data protection certification body) as a complement to ISO/IEC 17065

The Certificate was issued after the accredited Certification Body fully conducted the conformity assessment procedure according to the Europrivacy GDPR Scheme with regard to the Target of Evaluation, and as a result of the procedure made a positive certification decision on the basis of compliance with the relevant criteria

In accordance with the relevant regulatory requirements, the accredited Certification Body has fulfilled its obligation to publish a "Summary for the Public of Europrivacy GDPR certification process" on its website